CLAIMS 



1. A method for using a token to sign an unsigned binary comprising: 
signing an unsigned binary on a first computing device to obtain a first signature; 
downloading said first signature and said unsigned binary to a second computing device; 
using a token coupled to said second computing device to sign said unsigned binary to 

obtain a second signature; and 

comparing said first and second signatures. 

2. The method of claim 1 further comprising: 

using said unsigned binary on said second computing device, if said first and second 
signatures match. 

3. The method of claim 1 further comprising: 

rejecting said unsigned binary on said second computing device, if said first and second 
signatures do not match. 

4. The method of claim 1 wherein said token is a smart card. 

5. The method of claim 1 wherein said first computing device is a server. 

6. The method of claim 1 wherein said steps of signing and using use identical 

hashes. 
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7. Hie method of claim 1 further comprising: 
encrypting said unsigned binary and said first signature. 



h 



8. The method of claim 7 further comprising: 
5 de-crypting said encrypted unsigned binary and first signature. 

9. A computer program product comprising: 

a computer usable medium having computer readable program code embodied therein 
configured to use a token to sign an unsigned binary, said computer program product 
P comprising: 

computer readable code configured to cause a computer to sign an unsigned binary on a 
first computing device to obtain a first signature; 

computer readable code configured to cause a computer to download said first signature 
C| 1 0 and said unsigned binary to a second computing device; 

|j computer readable code configured to cause a computer to use a token coupled to said 

second computing device to sign said unsigned binary to obtain a second signature; and 

computer readable code conf igured to cause a computer to compare said first and 
second signatures. 

15 

10. The computer program product of claim 9 further comprising: 

computer readable code configured to cause a computer to use said unsigned binary on 
said second computing device, if said first and second signatures match. 

20 11. The computer program product of claim 9 further comprising: 
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computer readable code configured to cause a computer to reject said unsigned binary 
on said second computing device, if said first and second signatures do not match. 

12. The computer program product of claim 9 wherein said token is a smart card. 

13. The computer program product of claim 9 wherein said first computing device is 
a server. 

14. The computer program product of claim 9 wherein said computer readable code 
configured to cause a computer to use and said computer readable code configured to cause a 
computer to sign use identical hashes. 

15. The computer program product of claim 9 further comprising: 

computer readable code configured to cause a computer to encrypt said unsigned binary 
and said first signature. 

16. The computer program product of claim 15 further comprising: 

computer readable code configured to cause a computer to de-crypt said unsigned binary 
and said first signature. 
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